RNCryptor-go

RNCryptor-go copied to clipboard

Add support for key based encryption and decryption

7

This PR introduces key-based encryption and decryption, per the V3 RNCryptor spec. I've added test cases based on the V3 example vectors. I took the opportunity to tidy some of...

dmjones

Why the default number of iteration is 10000?

1

These four lines: 32: hmacKey := pbkdf2.Key([]byte(password), hmacSalt, 10000, 32, sha1.New) 45: cipherKey := pbkdf2.Key([]byte(password), encSalt, 10000, 32, sha1.New) 91: encKey := pbkdf2.Key([]byte(password), encSalt, 10000, 32, sha1.New) 92: hmacKey :=...

qw4990

fails with malformed data

2

if trying to decrypt short byte array with malformed data fails catastrophically with memory access error "accessing slice out of bounds". I fear this might be exploited with some injection...

michele-fadda